Malicious code in superram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 79fbcf578774307ebab34226f0aee5ca322b27b578f1256a46c19164d68d2b93 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in atlas-ui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc726ce71830a76a4cf4537cddb3eb056493e887aa77c9011a189917312244fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in intersting_package_bhavik (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94b4aeedfa83547d766e7896910cefb231937b8ad05b4c6e70483f784752535 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rfcs-tooling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1abbfacf3954101eb9977beb1c9691c40f0c7192b5350dedcdf4588f4e79d278 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nbaseasons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20a61520820c0194566cf71ef2c7762b3184becc1c573bc020bf63a387789700 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bytedance-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83368a66afbbabd7ac6793976de57a7056b3950ef8a54688009fa1c2a9d635d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-container-registry-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c820a88f96c37f80c1cd31ff7a8e16c0569322dff2c335469633c7614fcad195 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dozuki/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f17bfdd5096b4afec10f9f6815a4afc22a2c47896ab05c7573ead3262c5847 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-4606

creationtimestamp| type| source ---|---|--- 2021-01-08 18:42:05+00:00| seen| https://t.me/cibsecurity/21833...

Code Injection in ionicabizau/git-stats

Overview git-stats is a js package for local git statistics including GitHub-like contributions calendars. Affected versions of this package are vulnerable to Command Injection. It is possible to inject arbitrary commands by using a semicolon char in any of the options.start or options.end values...

Exxxxxxxxxxxxxx Directory Traversal Vulnerability

exxxxxxxxxxxxxx is a JavaScript-based package. A directory traversal vulnerability exists in exxxxxxxxxxxx. An attacker can exploit this vulnerability by placing a '. /' sequence in a URL to gain access to the file system...

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

The vulnerability of the OpenSUSE operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the mono-jscript package in the OpenSUSE operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...